F5, Inc.'s 10-K, read.

F5 is growing and generating strong cash, with nine-month revenue up about 10% to $2.5 billion, operating cash flow of $841 million, and $2.2 billion of deferred revenue supporting visibility, while it returns cash through large buybacks. The Cyber Incident, in which a threat actor exfiltrated files from BIG-IP development and engineering systems, along with the securities and derivative suits that followed, is the main overhang on an otherwise healthy business.

• The Cyber Incident cost $26.5 million in the nine months ended June 30, 2026, and the filing says further costs, customer churn or non-renewal, government inquiries, and possible penalties could follow. Exfiltrated BIG-IP development files add product-trust and reputational risk.
• A securities class action (Smith v. F5) alleges misleading statements about cybersecurity capabilities. A motion to dismiss was filed July 22, 2026, and two derivative suits are stayed pending its outcome. No loss accrual has been recorded.
• Insurance costs may rise substantially after the incident, and coverage may not be available on commercially reasonable terms. Recoveries so far ($5.3 million) are small relative to incident costs.
• The Lynwood copyright lawsuit targeting NGINX Plus code remains pending. After the Ninth Circuit remanded a portion of the copyright claim to the District Court, discovery is focused on whether NGINX Plus code was written by individuals employed by Rambler, adding IP-ownership uncertainty around a key product family.
• Effective tax rate rose to 16.0% for the nine months (from 15.4%), and the company faces multi-jurisdiction tax audits.

Not investment advice — general research, the same for every reader. You make your own calls.